Categories: Trojan

MSIL/TrojanDownloader.Agent.LFH malicious file

The MSIL/TrojanDownloader.Agent.LFH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/TrojanDownloader.Agent.LFH virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/TrojanDownloader.Agent.LFH?


File Info:
name: 7DE5B646A55CC34E5C07.mlwpath: /opt/CAPEv2/storage/binaries/57bcb15063d125d3928a5146dab9b6b3c658afe7af4827d76c9bfe1a990bc750crc32: F5A0C142md5: 7de5b646a55cc34e5c071d2f956ecdb9sha1: 9d0b38605d963c5205b44beff36f6a3e4fc2b958sha256: 57bcb15063d125d3928a5146dab9b6b3c658afe7af4827d76c9bfe1a990bc750sha512: 23994d09089bb07289c0dab1efdb27e7bb411f64b3b547932f698eca276fe862c60471d854fd327c526dd2c576cc69942e51d500752a3a9a0ee3035580c28cbessdeep: 3072:tX9KiKwTl+5JVv5c/pznr3nIY0/DkxChmHmp4c6BNuvNt:tX9bKwTwJcFUkxChx4atype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11CD43E495E0DDB03FAF42C398DF6D828A7A6BCDB023AC80E8F09765759B27D364584C5sha3_384: 109be55351df1f72aa3ead0418401c2b160da32afea037cb9cf20aa3437477b6b35977f45192e23b732d9f1a28f9db1bep_bytes: ff250020400000000000000000000000timestamp: 2022-04-04 09:23:27
Version Info:
Translation: 0x0000 0x04b0Comments: Discord - https://discord.com/CompanyName: Discord Inc.FileDescription: Discord - https://discord.com/FileVersion: 1.0.44.0InternalName: Egopomp.exeLegalCopyright: Copyright (c) 2022 Discord Inc. All rights reserved.LegalTrademarks: OriginalFilename: Egopomp.exeProductName: Discord - https://discord.com/ProductVersion: 1.0.44.0Assembly Version: 1.0.44.0

MSIL/TrojanDownloader.Agent.LFH also known as:

Bkav	W32.AIDetectNet.01
Lionic	Virus.Win32.Parite.lVuJ
MicroWorld-eScan	Trojan.GenericKD.48830315
FireEye	Trojan.GenericKD.48830315
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
K7AntiVirus	Trojan-Downloader ( 00590cae1 )
K7GW	Trojan-Downloader ( 00590cae1 )
Cyren	W32/Trojan.XMAC-1179
Symantec	Trojan.Nvcertleak!g1
Elastic	malicious (high confidence)
ESET-NOD32	MSIL/TrojanDownloader.Agent.LFH
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Trojan.GenericKD.48830315
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.11f085f8
Ad-Aware	Trojan.GenericKD.48830315
Emsisoft	Trojan.GenericKD.48830315 (B)
F-Secure	Trojan.TR/Dldr.Agent.osjup
DrWeb	Trojan.DownLoader44.49023
Zillya	Downloader.Agent.Win32.466250
TrendMicro	TROJ_GEN.R002C0PDB22
McAfee-GW-Edition	RDN/Generic PWS.y
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.48830315
Webroot	W32.Trojan.Gen
Avira	TR/Dldr.Agent.osjup
Antiy-AVL	Trojan[Spy]/MSIL.Stealer
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Generic.D2E9176B
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Stealer.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C5072365
ALYac	Trojan.GenericKD.48830315
MAX	malware (ai score=85)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Downloader
TrendMicro-HouseCall	TROJ_GEN.R002C0PDB22
Ikarus	Trojan-Downloader.MSIL.Agent
MaxSecure	Trojan.Malware.73709669.susgen
Fortinet	MSIL/Agent.LFH!tr.dldr
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)